Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/5_4n5wOhFYTu3t9ycOpFvuH9lD4.roa
File: 5_4n5wOhFYTu3t9ycOpFvuH9lD4.roa (raw, json)
Hash identifier: 46Vay3ohBERWTf4PoHRceDOKSPqgO4cj+MXdUVXEPiU=
Subject key identifier: E7:FE:27:E7:03:A1:15:84:EE:DE:DF:72:70:EA:45:BE:E1:FD:94:3E
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01985AF828A354938B5F698F7D0809D5240D
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/5_4n5wOhFYTu3t9ycOpFvuH9lD4.roa
Signing time: Wed 30 Jul 2025 10:54:29 +0000
ROA not before: Wed 30 Jul 2025 10:54:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214927
IP address blocks: 45.9.117.0/24 maxlen: 24
45.95.96.0/24 maxlen: 24
45.118.248.0/24 maxlen: 24
45.130.60.0/24 maxlen: 24
45.130.255.0/24 maxlen: 24
45.131.212.0/24 maxlen: 24
45.131.213.0/24 maxlen: 24
45.131.215.0/24 maxlen: 24
45.135.39.0/24 maxlen: 24
45.137.81.0/24 maxlen: 24
45.140.13.0/24 maxlen: 24
45.141.177.0/24 maxlen: 24
45.145.56.0/24 maxlen: 24
45.146.131.0/24 maxlen: 24
45.152.208.0/24 maxlen: 24
45.153.22.0/24 maxlen: 24
45.155.69.0/24 maxlen: 24
45.158.185.0/24 maxlen: 24
85.209.128.0/24 maxlen: 24
103.114.43.0/24 maxlen: 24
113.30.154.0/24 maxlen: 24
185.122.171.0/24 maxlen: 24
185.126.64.0/24 maxlen: 24
185.126.66.0/24 maxlen: 24
185.155.200.0/24 maxlen: 24
185.242.244.0/24 maxlen: 24
185.242.245.0/24 maxlen: 24
192.153.171.0/24 maxlen: 24
193.8.215.0/24 maxlen: 24
193.23.253.0/24 maxlen: 24
193.27.10.0/24 maxlen: 24
193.27.19.0/24 maxlen: 24
193.27.21.0/24 maxlen: 24
2a0c:7886:105::/48 maxlen: 48
2a0f:e7c6:1000::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 10 Aug 2025 14:03:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:5a:f8:28:a3:54:93:8b:5f:69:8f:7d:08:09:d5:24:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jul 30 10:54:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e7fe27e703a11584eededf7270ea45bee1fd943e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8e:47:8b:c3:be:6e:c9:64:26:50:5c:81:34:
32:18:6c:72:97:a5:76:ed:06:de:5c:b4:28:d1:cb:
55:a7:03:f4:4c:b5:97:14:5f:73:9e:c0:f6:50:95:
34:4f:bd:ff:95:f2:f9:38:3d:ab:43:d0:01:af:2c:
da:8b:61:4d:45:d6:7b:bb:9a:7e:3a:a3:90:bd:db:
f7:06:b7:1f:86:b9:7c:3e:4a:8b:d5:a0:c6:75:b1:
70:e4:cb:cf:fe:d9:89:5f:2c:f7:61:cd:95:c1:59:
b1:0d:1a:ae:0d:02:15:08:25:a7:29:af:02:1e:0f:
da:36:e6:bf:e4:6d:a3:a1:b1:64:22:14:db:04:0e:
ff:7e:2d:7f:b9:3f:00:fa:10:81:c9:74:e5:b4:ea:
b9:89:40:95:90:b5:c2:7d:78:7b:8f:a7:39:c8:5c:
48:e5:78:f8:14:aa:85:4b:25:1c:06:62:b2:d0:02:
c6:94:ba:3e:7a:c2:65:c8:40:cf:68:0f:97:8b:66:
08:b0:b7:32:d4:70:e7:da:d2:25:9a:bd:31:68:ef:
12:ca:6a:be:4b:24:59:99:93:a3:46:d0:18:2d:2d:
9c:ea:1d:46:a3:b2:1b:e2:7a:55:23:c0:8f:34:c3:
a2:2d:b9:55:4a:0b:ec:91:92:87:54:23:6e:24:89:
2f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:FE:27:E7:03:A1:15:84:EE:DE:DF:72:70:EA:45:BE:E1:FD:94:3E
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/5_4n5wOhFYTu3t9ycOpFvuH9lD4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.117.0/24
45.95.96.0/24
45.118.248.0/24
45.130.60.0/24
45.130.255.0/24
45.131.212.0/23
45.131.215.0/24
45.135.39.0/24
45.137.81.0/24
45.140.13.0/24
45.141.177.0/24
45.145.56.0/24
45.146.131.0/24
45.152.208.0/24
45.153.22.0/24
45.155.69.0/24
45.158.185.0/24
85.209.128.0/24
103.114.43.0/24
113.30.154.0/24
185.122.171.0/24
185.126.64.0/24
185.126.66.0/24
185.155.200.0/24
185.242.244.0/23
192.153.171.0/24
193.8.215.0/24
193.23.253.0/24
193.27.10.0/24
193.27.19.0/24
193.27.21.0/24
IPv6:
2a0c:7886:105::/48
2a0f:e7c6:1000::/48
Signature Algorithm: sha256WithRSAEncryption
5e:25:ca:4f:b6:07:23:82:78:fd:a0:38:98:1b:33:58:89:3f:
e0:f8:ae:f7:b2:73:80:26:c4:89:b8:2a:00:3d:65:4d:c8:fe:
c8:2c:f9:d8:ef:ca:d5:53:18:d9:5a:9b:fa:43:dd:3d:c6:b3:
9f:22:2c:b7:d9:10:21:df:8e:36:bb:33:19:fd:c6:f9:6a:8e:
b4:c1:03:1a:07:85:44:53:ac:f1:25:9c:db:26:7d:d4:a1:6b:
b6:0c:0e:1a:02:89:d3:8a:f5:96:1f:ad:ac:10:47:23:4f:4a:
a5:88:57:07:c8:3a:5e:f4:67:e5:56:04:9d:22:8a:4f:35:47:
7b:92:11:f7:a3:d8:f5:39:d0:dc:02:27:04:b7:3c:44:f2:d1:
f7:12:3d:93:d5:41:61:dd:66:9d:21:7b:bc:d9:9e:36:80:61:
92:1b:28:47:eb:0e:c4:9b:8c:72:bf:6b:1a:60:df:67:86:a5:
11:98:22:2a:c3:a6:00:21:72:b5:f0:ba:45:46:e0:38:93:8a:
48:de:18:49:06:41:48:1b:4d:c8:40:41:7e:fe:cf:d1:f9:df:
c9:6b:b4:da:a9:fe:b5:80:be:f6:e1:1c:6c:fe:40:40:df:83:
4d:0d:e5:71:1d:d0:b6:29:58:71:99:e5:c5:49:12:81:16:4e:
07:79:69:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:30:31 2025 by rpki-client